$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/bc3f5013-698c-36d5-83ea-4f564daf88b5.roa File: bc3f5013-698c-36d5-83ea-4f564daf88b5.roa (raw, json) Hash identifier: BK83uIT+Pkj+ao1IF0xZ3vCXA7PjcDu8YmYx7NnhmoM= Subject key identifier: 94:DB:35:6E:AF:B9:9A:62:54:EC:99:E9:2B:57:DA:35:86:D2:C5:9B Certificate issuer: /CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb Certificate serial: 010D0C9F4328584AB650D784B2AFDBCEB4F6E200 Authority key identifier: 22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/bc3f5013-698c-36d5-83ea-4f564daf88b5.roa Signing time: Fri 01 Aug 2025 13:00:41 +0000 ROA not before: Fri 01 Aug 2025 13:00:41 +0000 ROA not after: Thu 30 Oct 2025 13:00:41 +0000 asID: 15128 IP address blocks: 2604:fb80::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b6:50:d7:84:b2:af:db:ce:b4:f6:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e653f37-4b22-40a3-a8bd-e70f208c0efb Validity Not Before: Aug 1 13:00:41 2025 GMT Not After : Oct 30 13:00:41 2025 GMT Subject: CN=301d4ac3-ccff-490c-9d4c-02c2707f5795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:84:52:f4:08:0f:1d:d8:ed:f4:72:36:77:97: 58:8a:17:4c:86:b1:91:35:86:76:66:32:db:c8:a1: 08:5a:47:21:86:1b:94:4c:ab:62:e4:a0:71:b9:80: 45:49:8c:5d:21:8b:f1:63:65:63:1c:4a:76:c0:d4: a2:12:69:36:36:df:b8:60:a6:85:4f:a2:c4:9a:72: 36:80:dd:e1:b5:b5:5d:61:f0:24:e1:78:c3:35:5f: 5c:87:55:cb:7d:2c:fe:c9:65:28:8a:61:79:0e:70: df:e1:a5:b4:f4:27:ba:a6:6d:34:e8:83:e4:82:85: a2:bb:29:e4:46:3a:c3:b0:8a:d0:39:18:99:80:d7: 5c:00:88:d2:a1:e2:ca:0c:5b:ee:cd:4d:9e:85:80: 24:25:b0:b0:a1:5d:81:c4:d0:ae:4d:9b:e1:eb:53: f0:bb:47:d8:46:31:92:fd:72:1d:9b:e9:5b:eb:b9: 97:98:d9:c5:96:e7:9b:21:fc:0e:31:14:4c:a9:0b: b9:3f:8d:f5:e6:ad:6e:0c:e8:a9:b6:83:b9:de:aa: 7a:18:2d:e1:62:12:a5:e3:48:ae:1e:42:53:2c:9b: 9c:46:1c:04:54:61:c5:05:98:22:d9:95:76:88:2d: 35:60:94:af:60:d2:3c:ce:02:7e:8c:b1:69:d8:99: 83:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:DB:35:6E:AF:B9:9A:62:54:EC:99:E9:2B:57:DA:35:86:D2:C5:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/bc3f5013-698c-36d5-83ea-4f564daf88b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb/4e653f37-4b22-40a3-a8bd-e70f208c0efb.crl X509v3 Authority Key Identifier: keyid:22:23:96:FF:0D:17:D5:60:EB:0B:E3:91:7A:56:9A:74:92:80:C1:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4e653f37-4b22-40a3-a8bd-e70f208c0efb.cer sbgp-ipAddrBlock: critical IPv6: 2604:fb80::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:1b:e3:bf:46:f3:65:2b:22:24:1a:8f:83:95:fd:f5:6e:82: fa:79:4c:05:75:39:db:48:c2:dd:75:ff:7a:d4:58:90:af:89: 88:5b:9e:6a:ac:0e:b4:90:8b:0b:6c:4f:60:0d:4d:53:04:cb: 04:a6:1f:ec:ba:bd:f7:d8:f0:57:97:5a:ae:f6:28:01:b3:ff: 34:62:b9:41:56:88:a5:85:85:82:d6:13:b9:46:b0:bd:49:a4: f4:74:ab:0c:bb:fd:3e:2c:71:47:4b:e9:aa:d3:c6:4f:0d:65: 3e:17:c2:62:57:f6:e4:8a:30:04:01:f8:4c:7c:a2:a7:11:43: 08:3f:9f:4f:97:b3:5c:c8:cc:de:b4:bb:0f:a2:46:57:81:82: 39:81:dd:4b:ce:97:da:c5:40:66:18:65:6f:14:c5:db:e2:73: 99:2b:19:75:64:28:db:e8:70:19:e7:45:c1:e3:51:a2:2f:54: e4:01:a4:fa:d2:34:53:0f:0e:e8:5f:14:2a:45:46:1d:eb:26: 32:06:91:4c:79:26:86:de:74:5b:59:85:02:e0:8c:49:61:50: a8:f5:cb:d5:9f:67:bd:6f:ee:53:85:d2:a6:cf:4c:5c:f8:0c: b3:b7:8d:b3:41:ea:0f:e9:0b:4d:5e:e3:ab:14:60:fc:3b:a4: 8d:75:b9:4e -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEq2UNeEsq/bzrT24gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU2NTNmMzctNGIyMi00MGEzLWE4YmQtZTcwZjIwOGMw ZWZiMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk MzAxZDRhYzMtY2NmZi00OTBjLTlkNGMtMDJjMjcwN2Y1Nzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4RS9AgPHdjt9HI2d5dYihdMhrGRNYZ2ZjLb yKEIWkchhhuUTKti5KBxuYBFSYxdIYvxY2VjHEp2wNSiEmk2Nt+4YKaFT6LEmnI2 gN3htbVdYfAk4XjDNV9ch1XLfSz+yWUoimF5DnDf4aW09Ce6pm006IPkgoWiuynk RjrDsIrQORiZgNdcAIjSoeLKDFvuzU2ehYAkJbCwoV2BxNCuTZvh61Pwu0fYRjGS /XIdm+lb67mXmNnFluebIfwOMRRMqQu5P4315q1uDOiptoO53qp6GC3hYhKl40iu HkJTLJucRhwEVGHFBZgi2ZV2iC01YJSvYNI8zgJ+jLFp2JmDmQIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFJTbNW6vuZpiVOyZ6StX2jWG0sWbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1 M2YzNy00YjIyLTQwYTMtYThiZC1lNzBmMjA4YzBlZmIvYmMzZjUwMTMtNjk4Yy0z NmQ1LTgzZWEtNGY1NjRkYWY4OGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGU2NTNmMzctNGIyMi00MGEzLWE4 YmQtZTcwZjIwOGMwZWZiLzRlNjUzZjM3LTRiMjItNDBhMy1hOGJkLWU3MGYyMDhj MGVmYi5jcmwwHwYDVR0jBBgwFoAUIiOW/w0X1WDrC+ORelaadJKAwRgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZTY1M2YzNy00YjIyLTQwYTMtYThiZC1lNzBm MjA4YzBlZmIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT7gDBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQC3G+O/RvNlKyIkGo+Dlf31boL6eUwFdTnbSMLddf961FiQr4mIW55q rA60kIsLbE9gDU1TBMsEph/sur332PBXl1qu9igBs/80YrlBVoilhYWC1hO5RrC9 SaT0dKsMu/0+LHFHS+mq08ZPDWU+F8JiV/bkijAEAfhMfKKnEUMIP59Pl7NcyMze tLsPokZXgYI5gd1LzpfaxUBmGGVvFMXb4nOZKxl1ZCjb6HAZ50XB41GiL1TkAaT6 0jRTDw7oXxQqRUYd6yYyBpFMeSaG3nRbWYUC4IxJYVCo9cvVn2e9b+5ThdKmz0xc +Ayzt42zQeoP6QtNXuOrFGD8O6SNdblO -----END CERTIFICATE-----Generated at Mon Aug 4 14:15:14 2025 by rpki-client